Effective 10 November 2026
Information you give us
Registration collects an email address, screen name, password, date of birth, UK eligibility confirmation and acceptance time for the current terms. Passwords are stored as salted one-way hashes. Profile preferences include your selected atmosphere, cosmetic pin and session reminder.
Support requests contain a reply email, chosen topic, message, timestamp, reference and an account reference when available. Do not include sensitive health narratives, passwords, payment details or identity documents.
Information created by using the service
We keep session-security records, Play Credit balances, credit-activity references, daily collection times, game activity and voluntary-break end times. These records let us maintain consistent outcomes, prevent repeat changes and enforce your account controls. Basic request information such as an IP address may be used for short-lived abuse prevention.
Why information is used
Account and play information is used to provide the features you request. Eligibility and security information helps protect the service and other users. A support reply address is used to handle your request. Your choices are used to save requested presentation settings. Optional advertising and analytics tracking are not active.
Storage and access
Access to account and support data is restricted to the service and authorised operational handling. We do not publish your email, birth date, password hash, support messages or recovery tokens. We do not sell personal information or provide advertising profiles. Any necessary infrastructure or message-delivery provider should process only what is needed for the relevant task.
Retention
Account preferences and credit records are kept while needed to provide your account and investigate disputes or misuse. Browser sessions expire after 24 hours; password-recovery links expire after 30 minutes and are single-use. Support requests are reviewed for removal after 90 days unless an unresolved issue requires them. Temporary abuse-prevention counters expire as their protection window ends. Account closure requests are reviewed for deletion or anonymisation, subject to necessary security or legal retention.
Your choices and rights
You can change your profile preferences, sign out, clear browser storage and request an account break. To ask about access, correction, deletion or other applicable privacy rights, submit a privacy request through Support. We may ask proportionate questions to protect your account before disclosing or changing information. You can also raise data-protection concerns with the Information Commissioner's Office.
Cookies and updates
The Cookie policy explains each browser-storage item. The preference page explains the current essential-only choices. We update this notice when the service's information practices change and identify the effective version above.
Message delivery
Brevo sends password-recovery and Player Care messages. It receives the delivery address and message content needed for that task. ImprovMX forwards incoming messages to our monitored Player Care inbox. The delivery providers handle message information to route messages and protect their services. Do not include passwords, financial details or identity documents in a support message.